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msm if « * itrE-f - * k $ #i * * n m c& 

*>» 9 ©*»Km cjaas-iftLtf i <D*mmt m&o 
tut l.v+mmwv vmzffifcvmnzir* 3 ) zt\z 

-fc »K 313 OtRII*#4?gt **U 
WEf*-****"!, 

5estt*«^#gi±. m3<7>*®m<o*v how, me 
fc»*Kii, TftE^^MMs^oA^tf* i-ntm-nx 

v h5i*Ui*-r*J:d KflMtSitTV»*;r fcS-^Mftii- 
i km* * m -ft -r * si -sh k^tt-c * o -c , 



4SM¥ 1 0^- r 1 1 6 0 2 9 
2 

flTE* 1 , m 2 , £ 3 <D*P^SIO-ei54 fcli£fflO f 7 

y <om. »= x o t * it & mw<&m * n 4 ? tc * * o 

*3 0*Mftj&*#JeO*#*»fc Lfcfc-frKli, Aft If 

-sHb^fco 

m%.<o \£ y h nip h ttbmmm.iWBm \zim l t# & 
*t 4 m&ong-^bs * xts^x * nm-t ioizm^bti 

W<k*ft. 

[0 0 0 1 ] 

< b^es one ^ b^fe k * . 

[0 0 0 2] 

[ta£3|505$i^f5] DES (Data Encryption Standard) 

•^•^t 1 *^, 5:^, "Data Encryption Standard, "Feder 
al Information Processing Standards Publication 4 
30 6, National Bureau of Standards, U. S. Department of C 
ommerce, 1977. lZ&ffl\zK$L2tlT^Z>o 
[0 0 0 3] DES146 4 \2 v hA*, 6 4 Vf^ hffiSj 

^14Uov^rm^* f 4$ixTi3»5> 1 9 7 7^lcf§iE£ 
1 9 9 0#r%»=«fl-»«iife^gi»»Htt2: 

[0 0 0 4] SriJ, 36»»HffiUov»Tli, XK, E.Bi 
ham and A. Shamir, "Differential Cryptanalysis of DE 
S-like Cryptosystems, " Journal of CRYPT0L0GY, Vol. 
4, Number 1.1991C, *l®j»ttttt=ov»rti, jtK, *B 
"DES«*0«»)S|tt ( I ) " , V§^£ffi®-t 
+ i 'Jfr/^*'v')A 1 SCI S9 3- 3C, 199 
3 lCiem$^TV»-6o 

[0 0 0 5] DES* t H»*ilT*»«»oaflfO»* J «'± 
so EL/SJ:dft»Blffi*#li1-*i:, DE S Cli&TO J: 
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■9 tt mm £ # * 4 i # a h n 4 . 

(1) &&<n>>^-Y^ ^7w&v>^*n*-*>t$m. 

*-& : &\z. , Fsi-£*>tz#>\Z\ 2 8tTv horn? ?Bf 
fi2,-rsc:i:*fpTtgt l fe4* f x vhTA,£ LT6 4 if ? h© 

(2) FHSS:co*^(-F B ^SA t *-&o DE S^gSffcSfi 

#x4iSfl©HMX«r4 < LTft^tt**** 

(3) 5 6 If f f*»<b4<&a*fflv»TV»4i« % 5 6 If 
y K0@<D:K3-ei4^£-TM4&v> o ^- K^iTO^it 
K4"!K 2 56ffloS©a-&**gj'<*^- 

ffl * £ t k «t t? , «o^«ci«5if 3&nrrifi-c* * t <7>%m 

tiSJlTV>5„ 4*:, DES<0SS*ftOl^T*i 
i&J&S?Ij!*fcl4, &<0-W<D\£ y Y »mc J: ^#5tLT 

<b. M^tf^-Ti tl^J: «*tf * b 

[0 0 0 6] JtlEL^SK^v-'T, (3) WDES© 

<*U*.li\ Hfat, B. Schneier. "Applied Cryptography," 2 
nd edition; Wiley (1996)14, D E S X-^TripleD E S 
4r 4T ©«HM WW* 4: |JB3% L T v> * „ 
[0 0 0 7] DE S XJ4DE S WASS^HJ*^^* i 
6 4 Iff fo»fco»Mftfl9»a»*ri**ttT**i», 

4 (J.Kilian and P.Rogaway, "How to protect DES 
against exhaustive key search," Proc. CRYPT0'96,p 
p. 252-267(1996) *#B?.) „ 4fc, TripleD E S 14 D E 
S«r3it:MIt47;v3 , 'JXA«rfflv>TV^Of, H 

Tt, DESJa±OSc^tt3W*«-C**. 
[0 0 0 8] 

D E S X I4g#»ff ft *i&j!gfi?S£ft K» L T 14 D E S 
iPMs©2c£ttL*»JS*ft4v\, 4fc % TripleDES 
l±*Jft* f 3flfK44©T, j&aaftliDESOfta&K 
(01/3 b &4<, 

[0 0 0 9] ±BLfc (1) , (2) TJt-efcM 

H.*(iDES©flHSiflEKHLTil»K £rtf>£5fcfi-f 

DE S ittg&ofcig-f-fb&SS-frft^ - t D 
ESb OSJftttOWHjWRrt: K*£ LT To 
[0 0 10] *5&W©llf*ft*aaiW*ffc*ttli£«> 



(3) 1 0- 1 1 6 0 2 9 

4 

-f4 w fc K*4o 

[0 0 1 1 ] 

l»««r»*i-«fcie>o^ai ±iB«>i»*iij«t*fc 

- * «#SB Kflttfr * 4 4» Wft K« ■ 1" 4 ft * * 3? .* - 

48tIKif6ti, fl-SB^A^Sitfcllirfeatf y h<7) 
rt> *»*ttEa*l!H*Ri:T*lO*BI«lc«H-}-* 

Tg^^^T^di t \zX 0, £3©*W8**#4^Si:* 

#u uMB^-jm**^ htbekh 71^83 <o*ra@ 

O-SBffc 14^:86(0^? r- Outlet oT&£3*i4«# 

E*ff¥«^OA* If ? b ?!l t m—ff) Vf » h ?!l * ffl*-f 

[0 0 12] 4fc, Dt2 0»Qi:«4Btr9fbilESl4, W 

SO e » f ?fl^ * 4S1t?8Sr«S!c1i (=»« Lm^tL ■ 
4 *: A* Jtffi" 4 <0 teffi v» ^4 

* mm ic -5- it-ffian-i- 4 m-mi& w^soasra^s 

« * tL tzWBLO + K@**[H1 — T * 4 i i 3 

*K«4, «»o+iHwov»rn*» i ^im^xxts^x 

C »cf v» T A* *X * Jiff 1" 4 t «• 4 „ 

[0 0 13] 4fc, *3©»WH«6BfrWb*j*li. n 

*>t A 12 3 tL fc« « « =Sr a ^ ^ v a - ;v u » w ^ v> T * 

*e>AA**i^«««Ort, *»Wlf-y h«r^l^*ra 

0«fWttK«BBL, 3<bt-, ^10*KStg2<04 3 ra 

»3©+IRJ«*»4i:i: tH» HiTIBff K »2, 83© 

4«ti$5i!:a4- : rr^-7 l:*tot, mz <0^mm<OA-iz 4 
50 oT»SES*i4a»«ai4. 8 3© + E@A ? #5E<0£rt 
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[0014] ttz, »4w«w»c«4Bfrg-ft*ftii, m 

[0 0 15] 

( 6 4 tf y f ) <b A* * *t/S«*« k IC-ffc^ L 

r«#u *tts-r*w*'fb«s:*rm*i-&iiii«~iisi 

[0 0 16] 01 fc*v»T, (6 4 tf y h) l±fcj$ 

*c* i p tm ztittk, 2 o * ftrsi 3 2 tr 

h Lo t^ffllJ3 2 tf y ^Ro i&«feJjSS *l*„ a* 
* y*-*4 icii 12 8 t: y hO«it*k*«A**ft 

MSkl£^i:F2aSU f F2->7 baSr^ffiLT, r-'- 
**#»©F W»2 £ F 2 BI&3 K*ft-mA2j -*-<£>,, 
£ C X' F S8& 2 J4a#©D ESt PWcoa^&SfcifTfc 
HO-C*l}, F2H*3ttJaT»=iE'<*id«:ai»*!!! 

[0 0 17] FH&2liFn£ctt*ft£F2Hft3 0Ii} 

!&g*n i xjj-tz,, vm&mmn i u l o ( 3 2 tr y 
h) fcFM»2©mafc«m«>»tew»afl*ma-r* 

4 0 F2H»3 0Hl3tJli^ao*tl3 2 Ify M 

1 tft*. 

[0018] ttiWS^ii^ 1 L i 

(3 2tfyh) iRi (3 2 try h) t#»2gt:l(b 

[0 0 19] -5 U^HJfe^?J.T*li, DES^S 

DESOflMtKJOxT, &WL<r>Xft% (Entente 
S) KF 2 H8c*ifi*i&A,-ev»«. 
[0 0 2 0] 0 2l±@li:fttt^^-/i-Ji'8li4Ol 
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u^o^ffi^^LT^t), des tm-vrntfLomx* 

o tax ^yi- 4 It i <D X i zmf&n&A >r V a 

A, B t till— OM-StfrSr? O-CiiTliftX^yjL 

[0 0 2 1] 1 2 8 tfy h (OS^tf »li^5-r-2 $ 
^ »ttBMEIlPC-l *ifc**tfcfc, 56lfyh?>a 
fcLT#* a. -*»KAJ[jSft.4 0 » (5 6 

io ify h) ^2oi:#5-LT4wut2 8 cy 

2ooae>&*Co (2 8tTyhKDo (2 8 Iff 
M tC-ov»-ca£v7 VSB 1 0AT£->7 HaatrJdLfc 
If? 1 AKA;fc1-&. lf?haM?»ll 

AttjJfJgWlf ? bXftAaicJ: tj 4 8 If v hfrb*iHt 

5 tf y FWit LTI4, 5 6 try haofl|*.li\ £a><b 
9< 1 8> 2 2, 2 5, 3 5#g<05 Vf y hUfim^h'h 
mmzLXX-? YM&Ul 0 B*fel44 8 Ify h*» 
<bfc&f&2<0tpwai:, 5 tr y h *><b *»H1* 3 

20 fL4„ 

[0 0 2 2] -f-UT, tfy bjM*?SBl 1 A*>t»04 8 If 
y KD«i:tfy hjgJRSBl 1 Bri»lb<D4 8 If 7 h^fit 
»«flMUilflffl« 14tf), *4>IM12: Lt© 4 8 
Ify hWSS3 0^WM«-3^LTl 6 Iff KD&G 
1, G2, G3*W4o i^IGl, G2, G3*F2 
mt LTF2P,5S!c3tcA*i-4o 

[0 0 2 3] mA*i?3.-)mA<D\* y \-WSi 

§51 lA*>5)»5 1f-> hOftt, jB^^->'i-;VS|5B«0 
Iff HSIRSBl 1 B*t>05 e-y Koatoffir^w 
30 MSfDl 2Sr^*!), OX 1 0 (0X141 6)1 

t^ra-eSff&65^a«l 3 «r to/;t<D*F2 
->7 LTF 2BB3&3 UA^I-tio 

[0 0 2 4] S&fc, ^HM^!ffi-ei4, 8^<rya-;v 
35 A tTy hiliRSBl 1 Afrb<D4 8 tTy KOftSrFKI 
ftlt*Jli:LTFH»2»=A*1-*. ^©2 8 

try boaCo (2 8 Ify M , Do (2 8 try h) 4: 
£y7ht5-ti:J;oTSt,K/:Ci (28tfy 
h) , D i (2 8 tTy H t4'^fcoaott^*-5?jL-/HB 

40 [0 0 2 5] iOJ:-5»r*SEJflgga|-e»4, DEStOS 
»tt*aM*i-4fc«>U, 1 2 8 t: y Koa«r6 4 If y h 

1*0 n l, -e- n-5-*fi l r d e s ©ax * a - 

;u§BA> B*afflLTv»«„ FM*CAA*a4 
S^cit LTIiax-y v i-;ug5A^ib<D4 8 tTy ho 
aSr-?-©^ tlv>tv>5<, ifc, F2MSli:ffiv»4tti: 
LTI4SX-jrv*i->i>g|5A^'b0 4 8 tf y hatiX^r 
v*i-7UgBB3i>ib0 4 8 Vfy hatOtTy hriO^flfe 
ftmmftil 6 t:*y hrioyny^ic^HILT, -?-ix 
-fixGl, G2, G3tLtv>4. S/.:, 5 6tTyf-a 
so ©£j6»feftje*§«>5lf? h*a«LTF2HftOS'7 
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[0 0 2 6] i!3 liF 2g5&3^>«fi£^^1-|H-e** 0 

1 i-CiiEl 1 R o (3 2 If -J Y) £ 2-0\Z^L 
X2-o<n\ 6\£y Y<r>?W 9*±J&-tZ>o %.m<Vl 6 

tz. fcmv> 1 6 tf ? h yn v ? ti^as 2 1 t$m&m 

mm 2 2 tCATJSttSo 
[0 0 2 7] 1 li 1 6 \Lv h&G 1 b&m<Q 1 

6 tf * h & t ©nas* t o -c8Mfe&5fsa*D 2 0 KA7J 

1"*o 8Mfe6*rtta«2 Oli&flOOl 6tf v h^n-^t 

i&a«2 1 frhoutowewm^m* t -?-<™g 

*«r£i«lllv7 YW2 3 »-A*1"*o 
[0 0 2 8] SMfeftf&SfD 2 2 (i 1 6 If y Y&G 

2 t *«!ico 1 6 tf * f 7" n ? * t ©rar^jfe^tafD* 

m*s? YU2 3 l±, M^I»i2 0<z>tti;fc££Nteft!& 
a#02 2Ciii**>^j:* 3 2 If * KOjgirttLT, A* 
Sil*:5lf y hC0F2->7 M8«r 2 Jl^fSt Lt, 

^oir? h &#o7£3« m -> ^ > Sr^T'fc'Po 

[0 0 2 9] SMv 7 b -otz&W 3 2 tf v Y<T>*? 
Hf-J'iOEffl'Ol 6 If ? KiF 2MSc3<73*#ftO 
fcfc:t)fcfc*o 4fc, h*^?o*:&*>3 2 fcfv 

\-<r>*W7-9<Ofc¥fr<D 1 6 If? Hi^-ffeflSttSft 2 
4UA£lSft.S>o 

[0 0 3 0] i&S«2 5I±1 6lf-> K^)iG3 t£MIH 
•>7 h £-fro*:&0 3 2 tr* hO+Par'-^O&^O 

1 6 \f y hk©»a««rfcoT-€-«>«f***«bfl9lfca« 

2 4 KA*-*-*. 8Mbtilfr9*U 2 4 iiiwiiaat&ja 
lv7 2 \Lv Y f$T- 9 <D*¥fr 
CO 1 6 tf -J Y fc0HO3Mfentt9?D*& •)< -E-O^m*- 
F 2M&3 07±4*-£-fc LTtU*t5. 

[0 0 3 1] ilBLfcJ:^^, *X;N0gfiOF 2 HSt? 
li, 3 2(f7hOA*tl6>f7hfoUjM(LT, » 

-So 4fc. ai->7 h§i5T-i±F 2 ->7 hsotf * l-s/i 

It 3 2 tr? K0@irWLTJ«cll->-7 hSr^ToTV^o 
[0 0 3 2] &±.<DUB%fri>t>fr2> * 7 *ftft?B&l 
©BH~ffcJ*1t05fl|jftliD E S t 5>*-/M* 

sS;S-fflv»Tv>-6ci t tr*-&o 6 4 tf-> Y (omiteStL-r: 
1 2 8 tf y hOi^t^til t KJ: 13 > DESiOfe 

SI^-jrvjx-^SBA, BO 6 4 If * K0A7Jri*|s] i:t?* 

F 2m%.3X-m^bti2>G 1 . G2, G3 i 

F 2 h&liO X 1 0 ifc&o 
[0 0 3 3] -cot^, gl3IC^-tF 2K&3<08Mfefit) 
I&af0 2 0> 2 2O-7J©A7J7> { 0 iiSOt, F 2 K 
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S3 KA7J£tt£2OC0 1 6 If? h©@ll-E-<0* i£S 
IhI->7 YU2 3ICA*?n*o 7xS@v7 KSB 

2 3T*liiax->-vi-;Pg6A, B!6>t)C02O(05 If f h 

mvmotim&mmm 1 2 1 0 x 1 0 h<n%mthfemi 

13£F2v7hgfcU c\<02.7%F 2is? hgtl^ 
o*v>T7ii«t!5I?:^ToTV^O-C, G3 = 0x fife*), 
SMfe6Sf&a*n 2 4<O-75«0A7J* f 0<Ot Hi, F 2 B8S 
3lzAj]Ztitz*y (3 2lf^h) tWlCVv 

10 [0 0 3 4] iOi-5tlLT, Zoog^tya-^fl 
A, B«9 6 4 If v Y<D\j3ti s m£X'$>&t£hlf. F 2 BS 
S3^0S3gli*m$i^4C:tic^:*O•C , , 12 81f9h 
Sco^(0 6 4 If h*St lTffiv^;DE S fc£< R 

[0 0 3 5] Zbiz^ *nMMB-ei±F 2®$k*tiax.tz 
») de s tit^Lr-S-SfOT'-^iQ.a^iiliD 
-tZZtlzteitf^ F2MSt s fflv»c>ix*fa#l±7£iils] 

•>7 iftaft. nas. «MfeW^a#n-c* >j , - 

DE S tit$LLX$>$ ijeTtS-ili^,, 

[0 0 3 6] Src, *HJfe^®r-iiF2»i»-eoa<9ira 

<0\£-y Y&*m<?Lr Z%im { 'J?%^o 

30 ani^ffeixr. aovf^ hSOltiD^J: l)3iSO^i4 

[0 0 3 7]WTtC, O S t LTSolaris2.5, =i >'*<i 
7i LTgcc-2.7.2 S-fflv^ Sa-fk*7*V3 >i LOv 

fcDE S Icov^TftlBOL^o ii-Cli, ±12-9" V 7* ;W 
-77 , n^7A*'£,F2 ra&lcM-r&66#*& •) 

[0 0 3 8] ttiSOOie^. i4 (a) \zm-f X n 

ES©90. 6%T4>13. D E S £r 3 fii:»JiE LfcTrip 
leDE S*«DES<01/3 (-r^*?*). 33. 3%) <T> 

So 

[0 0 3 9] OS t LTLinux , CPUt LTPe 

ntium 120MHz, 3 v t LTgc.c-2. 7.2. 1 . SSit 

t7"y a LT-02 im^tz'y^T^^mTX-m^ 
•f V V - * 7*d ^ 7 ^ Sr H^f L Ttr^-tO^ ;u - T" v 
hS-^Jfe^StDE SIcov^Tfi-iML^o -©«•&<> 
so ±i£-9-Vy*;uv-^yn^7 A^e,F2HS:(;g5i- 



(6) 
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[0 0 4 0 ] tfSOOtt*. HI 4 ( b ) urn* i o 
#»&*tfeo H4 (b) Kiftlf. *fr--fv h<D&m 
ib"C«*HJfe3^)S«iDE SO 6 5 %T$> IJ , D E S Sr 3 
*fc«J8 LfcTripleD ES**DES01/3 03*7?* 
* £ £ £ JtK u r 2 fi+^iSa-c * * i t o 

[0 0 4 1 ] 
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10 

[1212] Hi ^i-jB^^vjx-;v«4 oia^ofllisS; 

[EI 3] Hl^i"F2KI»OfllJ«t^i'Hr**o 
IB 4] **M0Bffl^et*<b^ftlc«*-9->^V-^ 

tDES Kov^Tftilil L/Stt*«r^+BI"e*4o 

1 -*ilhtt»afP, 2-FHSu 3-F2HJS. 4 -« 
^^va-^«, 10A. 10B-iy7F», 11 
A. 1 1 B-fcT* biSlRgBx 12, 13, 14"#M 



[Ell] 



im2] 



IP 



I LD<32) | | R0(32> | at^fcj 



*tt»K 
i 




16 



I La<32) | | R2(32) | 
| Ll5j32) | | R1^32) 




^4 



I L16(32) | | R16{32) I 




IP-i 



| B&#3t(64T*1 



64 



12Btf y htt 



56 



56 



0X10 

13 12 



FHettt*tt 



G1 



14 



G2 



63 



16 16 16 

Fzm 



± 



00(26} 



D0(26) | 



28J TQA 1 0A |2B 



TTa 



I 



=3 



f C1{28) 



D1(28) I 



7 



[03] 




t 



| C0<2B) ~D0(26) I 



2B| 10 B 1 0B jgS 



Jfi |4S 



I Ci<28) | D1(2B) | 



(7) 



fclBT 1 0- 1 1 6 0 2 9 



[i4] 



DES 






64Kbpa 


SBKfapd 


90.6% 



(a) 




(b) 



THIS PAGE BLANK (uspto) 



